Composer lock and tweak actions

.github/dependabot.yml

@@ -1,3 +1,4 @@
+---
 version: 2
 updates:
   - package-ecosystem: github-actions

.github/workflows/github-actions.yml

@@ -0,0 +1,21 @@
+---
+on: pull_request
+name: GitHub Actions
+
+# Detect if this action is already running, and cancel it.
+# This most likely happened because a second push has been made to a branch.
+concurrency:
+  group: ${{ github.repository_id }}-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  actionlint:
+    name: Actionlint
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v5
+      - uses: reviewdog/action-actionlint@v1

.github/workflows/pull_request.yml

@@ -1,3 +1,4 @@
+---
 on: pull_request
 name: Check and lint
 permissions:
@@ -6,7 +7,7 @@ permissions:
 jobs:
   php_version:
     name: Lookup PHP version
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       php_version: ${{ env.php_version }}
     steps:
@@ -16,7 +17,7 @@ jobs:
 
   review_codestyle:
     name: Codestyle
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: php_version
     steps:
       - uses: actions/checkout@v5
@@ -34,7 +35,7 @@ jobs:
 
   static_code_analysis:
     name: Static Code Analysis
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: php_version
     steps:
       - uses: actions/checkout@v5
@@ -57,7 +58,7 @@ jobs:
 
   unit_tests:
     name: PHPUnit tests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: php_version
     steps:
       - uses: actions/checkout@v5
@@ -75,14 +76,14 @@ jobs:
 
   hadolint:
     name: Hadolint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v5
       - uses: hadolint/[email protected]
 
   markdown_lint:
     name: Markdown lint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v5
       - name: Install problem matcher
@@ -94,7 +95,7 @@ jobs:
 
   docker_build:
     name: Test Docker build
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v5
       - name: Build docker image

.github/workflows/yaml.yml

@@ -0,0 +1,24 @@
+---
+on: pull_request
+name: YAML
+
+permissions:
+  contents: read
+  pull-requests: write
+
+# Detect if this action is already running, and cancel it.
+# This most likely happened because a second push has been made to a branch.
+concurrency:
+  group: ${{ github.repository_id }}-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  yaml-cs-fixer:
+    name: Yamllint
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v5
+      - name: Run Yamllint
+        uses: frenck/[email protected]
+        with:
+          strict: true

.yamllint.yml

@@ -0,0 +1,13 @@
+---
+
+extends: default
+
+ignore-from-file:
+  - .gitignore
+
+rules:
+  indentation:
+    spaces: 2
+  line-length: disable
+  truthy:
+    check-keys: false

action.yml

@@ -1,3 +1,4 @@
+---
 name: 'Sync Drupal security updates with JIRA'
 description: 'Check a Drupal site corresponding to the current repository for security updates and creates JIRA tickets accordingly.'
 author: 'reload'

grumphp.yml

@@ -1,8 +1,9 @@
+---
 grumphp:
-    ascii:
-        failed: ~
-        succeeded: ~
-    tasks:
-        phpstan: []
-        phpcs: []
-        phpunit: []
+  ascii:
+    failed: ~
+    succeeded: ~
+  tasks:
+    phpstan: []
+    phpcs: []
+    phpunit: []